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SUPPLEMENTAL INFORMATION DISCLOSURE STATEMENT 

Mail Stop Amendment 
Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

Sir: 

The documents identified on the accompanying PTO Form SB/08B, "Information 
Disclosure Statement by Applicant" are cited pursuant to 37 C.F.R. §§ 1.56, 1.97, and 1.98. 

IBM (who acquired Internet Security Systems, Inc., the owner of the subject patent 
application) hired a professional patentability searcher (independent contractor) to review the 
large number of documents cited in an IDS filed on October 7, 2005. The searcher was asked to 
identify in this review a much smaller number of these documents deemed most pertinent by the 
searcher to the current claims of the present patent application. The documents identified by the 
searcher through this review are listed on the accompanying PTO Form SB/08B, including the 
searcher's identification of pertinent page numbers within those documents. 

Copies of the documents identified on the accompanying PTO Form SB/08B were 
provided with the larger IDS submitted on October 7, 2005. However, to further assist the 



I hereby certify that this correspondence is being deposited with the United States Postal Service as first 
class mail in an envelope addressed to: Mail Stop AMENDMENT, Commissioner for Patents, P.O. Box 
1450, Alexandria, VA 22313-1450, on August P / , 2007. 



Robert T. Neufeld, Reg. Mo. 48,394 
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Examiner, additional copies of the documents identified on the accompanying PTO Form 
SB/08B are enclosed. 

Applicants have not studied, or otherwise analyzed, the documents identified by the 
searcher or compared the relevance of those documents to the other documents cited in the larger 
IDS mailed on October 7, 2005. Applicants make no representations, and gives no assurances, 
regarding the completeness, or accuracy of the review and identification of documents conducted 
by the searcher or that none of the other documents cited in the previously filed IDS are more 
pertinent to the claimed invention than the documents identified by the searcher. Applicants 
request that the Examiner independently fully consider all of the documents cited on the 
accompanying PTO Form SB/08B and initial and return the Form to show the documents were 
considered by the Examiner. Of course, the Examiner is welcome and encouraged to consider 
any of the other documents cited in the IDS mailed on October 7, 2005, as well. 

The submission of this Supplemental IDS does not constitute an admission that any of the 
documents cited in the Supplemental IDS are statutory "prior art" or otherwise have priority 
relative to Applicants' claimed invention nor does submission of this Supplemental IDS 
constitute a waiver of any right Applicants may have under applicable statutes, rules of practice 
in patent cases, or otherwise. 



Respectfully submitted, 




David L. Adour 

IBM Endicott IP Law Counsel 

Reg. No. 29,604 
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DENNING, An Intrusion-Detection Model, Symposium on Security and Privacy, February 1987, 
Pages 1-17, SE-13(2), IEEE Transactions on Software Engineering. (See Pages 5-14. Paragraph 5) 








LINDQVIST et al., eXpert-BSM: A Host-based Intrusion Detection Solution for Solaris, Proceedings 
of the 17 m Annual Computer Security Applications Conference, December 10-14, 2001, Pages 1- 
12. IEEE Computer Society. (See Pages 3-6, Paragraph 3) 








PLATO, Beta Draft, Network ICE, ICEcap Administrator's Guide, Version 1.0 Beta, 1999, Pages 1- 
143, Network ICE Corporation. (See Pages 25-33, Paragraph 4) 








MUNSON et al., Watcher: The Missing Piece of the Security Puz2le, Proceedings of the 17* Annual 
Computer Security Applications Conference, December 10-14, 2001, Pages 1-10. (See Paragraph 
5) . — 








CUPPENS et al., Cooperative Intrusion Detection, Pages 1-10. (See Pages 5-9, Paragraphs 5-7) 








KUMAR et al., An Application of Pattern Matching in Intrusion, Technical Report CSD-TR-94-013, 
June 17, 1994, Pages 1-55, Department of Computer Sciences, Purdue University. (See Pages 4- 
1 5. ParaaraDh 3) 








Rationalizing Security Events with Three Dimensions of Correlation, Technical Brief, 2005, Pages 1- 
6, netForensics Inc. (See Page 4) 








Internet Scanner, User Guide, Version 6.0, 1999, Pages 1-182, Internet Security Systems, Inc. (See 
Pages 37-53, Paragraph 3) 








BURCHELL, Vi-SPY: Universal NIM?, Product Review, Virus Bulletin, January 1995, Pages 1-3. 
Virus Bulletin Ltd. (See Pages 1-3) 
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•EXAMINER: Initial if reference considered, whether or not citation is in conformance with MPEP 609. Draw line through citation if not in conformance 
and not considered. Include copy of this form with next communication to applicant. 

1 Applicant's unique citation designation number (optional). 2 Applicant is to place a check mark here if English language Translation is attached. 
This collection of information is required by 37 CFR 1.98. The information is required to obtain or retain a benefit by the public which is to file (and by 
the USPTO to process) an application. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. This collection is estimated to take 2 hours to 
complete, including gathering, preparing, and submitting the completed application form to the USPTO. Time will vary depending upon the individual 
case Any comments on the amount of time you require to complete this form and/or suggestions for reducing this burden, should be sent to the Chief 
Information Officer, U.S. Patent and Trademark Office, U.S. Department of Commerce. P.O. Box 1450, Alexandria, VA 22313-1450. DO NOT SEND 
FEES OR COMPLETED FORMS TO THIS ADDRESS. SEND TO: Commissioner for Patents, P.O. Box 1450, Alexandria, VA 22313-1450. 



If you need assistance in completing the form, call 1-800-PTO-9199 and select option 2 



05456.105009_ Substitute Replacement IDS Form PTO_SB_08A.DOC 



FEE TRANSMITTAL Attorney Docket No. 05456.105009 

This sheet accompanies a patent application transmittanor the following^olication: 

Application No.: 10/066,367 L AUG 27 2Q07&) 

Inventor(s): Robert Zobel et al. 1 
Filing Date: January 31, 2002 Jtf 

Title: Method and System for Configtj^g^n^^duling Security Audits of a Computer Network 

The filing fee is calculated as shown below: 
1. FILING FEE: 



SMALL ENTITY LARGE ENTITY 



FOR: 


FEE 


FEE PAID 


FEE 


FEE PAID 


□ UTILITY FILING FEE 


$150 




$300 




□ UTILITY SEARCH FEE 


$250 




$500 




□ UTILITY EXAMINATION FEE 


$100 




$200 




□ PROVISIONAL FILING FEE 


$100 




$200 




□ DESIGN FILING FEE 


$100 




$200 




□ DESIGN SEARCH FEE 


$50 




$100 




□ DESIGN EXAMINATION FEE 


$65 




$130 




□ REISSUE FILING FEE 


$150 




$300 




□ REISSUE SEARCH FEE 


$250 




: $500 




□ REISSUE EXAMINATION FEE 


$300 




$600 




□ APPLICATION SIZE FEE (If the specification and drawings 
exceed 100 sheets of paper, the application size fee due is $250 ($125 
for small entity) for each additional 50 sheets or fraction thereof. See 
35 U.S.C. 41(a)(1)(G) and 37 CFR 1.1 6(s). 


$125 




$250 




SUBTOTAL (1) 


$ 




$ 
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FEE 
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FEE 


TOTAL CLAIMS 


-20 = 
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x50 = 




INDEP. CLAIMS 


- 3 = 




x 100 = 




x200 = 




□ MULTIPLE DEPENDENT CLAIM PRESENTED 


+180 = 




+360 = 




SUBTOTAL (2) 


$ 




$ 



3. ADDITIONAL FEES: 



SMALL ENTITY LARGE ENTITY 



FOR: 


FEE 


FEE PAID 


FEE 


FEE PAID 


□ LATE FILING, FEE OR OATH 


$65 




$130 




□ NON-ENGLISH SPECIFICATION 


$130 




$130 




[3 OTHER: SUBMISSION OF AN INFORMATION 
DISCLOSURE STATEMENT 


$180 




$180 


180 


SUBTOTAL (3) 


$ 




$180 
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TOTAL FILING FEES: $180 

^ Enclosed is Form PTO-2038, authorizing the charge of $1 80 to cover the application filing fee. 
□ A check is enclosed for the total amount: $ 

^ The Commissioner is hereby authorized to charge any additional fees required under 37 CFR 1 .16 or 1.17, or to credit any overpayment, to 
Deposit Account No. 1 1-0980. A duplicate of this document is enclosed. 

KING & SPALDING LLP 
34 th floor, 1 180 Peachtree Street, N.E. 
Atlanta, Georgia 30309-3521 
Telephone: 404.572.4600 




Robert T. Neufeld, Attorney for Applicant 
Reg. No. 48,394 
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